Pulse
for Booking.com partners
🎁 Your partner voucher is waiting

Open in the Pulse app to get your voucher

Open in Pulse
Opens the Pulse app and loads this page inside it. Needs iOS with the Pulse app installed.

Sign in to claim your voucher

Use your Booking.com partner account
Forgot password? Create account
Sign in constitutes acceptance of the Booking.com Partner Terms.

URL the app loaded

Read-only. Keys the app appended show highlighted.
The deep link loads this page with no host check. Audit: the app appends lang, from_pulse, source; the id flags add device_id and account_id (Keychain values). Device 2026-11-04: lang and from_pulse seen; source not; top-level id-flag test still pending. Highlighted keys prove the leak: the GET request carried them to this host.

Share this link with another partner to get a second voucher

On iOS with Pulse installed, this link opens the app with this page inside.

Research probes

Research only. Nothing is sent anywhere. Results go to the log below. The audit proved this route registers NO bridge channel (empty jsInterfaces), so there are no postMessage probes. Each button fires one URL shape the audit found.

Router handoff (bookingpulse:// from the page)

Partner identifier leak (with_device_id / with_hotel_account_id)

Nav-bar title (title / navigationTitle keys)

Webview behavior

Probe log (research, client-side only)

No probe ran yet.